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0 : % <DMM 3 1 ro^M Lx:wSMM&& y % — St T # 

[itsra2 ] twain i:* v f mi.©*- f 

^t^r«#CD^i^^#- F U !31B*2 * ?h«7- 
IIU*5r3--3 Miam i F©tt«#*^? *>4wMf 

:fe:V ::: 

[ * 4 ] m§m 1 * ^ b 5 7 - # /j^sit^Mfi 
■iwei-if -m$m J Mi a® 1 * * h ^ ~~ # t 

i$ia®2* > f ^^^^0frfaiB®fi»c^it3n/cfr 

IWBI&.l *V F #^5S$iaif 2* .y b y ~pK.T.& 

Mia^ii^^fs©^-^ ^*)gt^, ^ia® 1 ^ ^ f 



^ F ^— ^ ^ > F ^^"COtffga— If — ® 



8] 



[I 

^ - f fc»jtrr- ^^s^- $ % , Wias*^ 6»ia^ 

is$}h.n<*r y Fr-^-^v/ F^-^^-M^^C^^, 
MiB^Ef- ^ JfcWIBf 5 '^ y b'"f— *>-^ F 

y-^^^i^iB*^^ ^ F ^-^i^©M^>^""^3i 

t& 6 r wBife* h § i * a 's h f - i «:«iaBKf' - 

^ i'tt^Rt: s ^ ^ & «:£t> c i t ^%m^mi£ 

b^,mm^mmm^mi^ £hfcw$imm<&> 



(3) 



10-3 13488 



WBB!M(=i~ : Ffc'# 



[0 00 1:] : 

ilft*^ htf— #©fc«6<D»Jtt (ffiobile) rx-if-®^ 
©SHE (authenticating) StjigG, sfe^^BWBSSSSB 

g ( handsets) <D'jz 3- - if - ^ft^SL^gtMfl 
tf>*x y T (coverage) &tctb<Dl$mMM 

-t- y F V -- ^ ( p*i?l i c 1 and rssobi'i e netsaorks : PL M 

fM>Svm f * ^ # ^ n - / W ^x^a^ < -f 
(Global System Mobile: GSM) * v F V — Zifi—W. 

Xf A ( Advanced fcfobi 1 e Phone System : A M P 8 ) <b 
^W'^^Jl'^KfflSltlWK^X^i ( Digital &sserican 
&&>bile Phcsie System 'DAMP 8 ) i#fiH>6*rC:fe 
*> . 3 h CC H*t?tt; MBMM^^ ^X 5" A { Person 
al Handiphoaie System : F II S ) <h V ^ 3?;^;!/ ^ — 
( Personal 01 gital Cell ul ar : P D C ) ^ ^ I- r J 

~ # t Mm^hnx^ h. J: *)MHx~e } <%, m&mMm 

MMM* y X^<U (Universal Mobile TelecoasFium cation 
s System: UMTS) ^^^$tlXi^ r . frtt y 

(land-based) $$(DX*$}& 0 
[00 0 3] m?t&. G S MVX fA»^ r#it £, 
^ . ^ 5 ^ )l* - ^ (Dfl <?<Di2 ( eel 1 ) £2, — 



a<D, : Sl«WK(IHIB.L/fc. *±*S6^SfI^^ (base t 
ransceiver stations : BTSs) tc£ D#^l^§tlT^> 
iBTS sIt WWte ( base sm tchi 

nq centres :B SCs) €:® t^C.^I -f J^#-k ~ 
(jBK>bile switching centre : M S C ) i^^Slarr^ ! 

«msck, * >^ Ft? -^^6m*^^^ams 

&y h V — & ( public switched telephone rietM>rk : 

p sin) icmo'cv- f v*-? & c t fmm 

^Wt^X^ (ho^e location register: HLR) 
f-«*BH:LR«:»»Li, **l^6HKO^|l#*sff 

— ( subs c ri ber i denti f i cati on a&ockal el'S I M) <^ 

- f^, -jtwA#*w(i**fc*^^ ^^(D^B^mm 

^li^ (international snobile subscriber identity : 

20 ims d : 3&^«jGdtsn, : »2-<t>?iatt, gsmow 
m*p~c k i ^ o s tifcfws^^^ ^ - * e^msE a 

SIE"fe> (authentication centre : A a 
C) « % HLR«ai-C^9^7 h^.-^©*»A 
*<Dfc&€> I MS ll?J:[>l:i R:^T^f r -- ^^^ 

tto'i'Stc, I MS I «i-if-i^*ie»:HLR;^aMS 
3*1, .*htcJ;?K :HLRtt^-lf-*iBBE-r4 l fc«>K: 

AuC^Kf^, I MS I AuCOi^^tl 

30 R A N-D fe A u ertr^ShS. KiUK-R A N D 4 K 
i ©ttBCi" I9^#*©IS* ( si qned result) SEES 
*^5fe : S .* ^Sfti^C, G SMiif*tA:3 t ITfS 

n, a^» ( secret key) K ■■c*«*"3tf-S.7 ; il'=f"y X 

^it^^MB<Dicmcmh> li'lRfctt, - WE 

40 . 8 4 tf v h c *#Rtr : : 4 i: 6 % 9 8 

fcT v F ffl*t^S«&*-HDT^l) : X ; Afc<fc QttfiE 
SlltfeJ:^ RAND, SEE SWO'Kc^« 

[0 0 04] -et-r, I^<DRAND0i^, MSG* 
: ^f-m^<DS I mt: SftS f i/cgL^R A N D cDlie 



(4) 



OC, JBBTWfcttlft'S titers V XA A 3 / A 8 

[0 00 5] SRES' <Dj0}<£, h>7-^%IlX 
MSG -^iB«3: : *x. SR E 3 pfl'i tfc 

s g g s ummmjc a s t uxm& : .s : tismmt 
^MtriMfi^tifc if - # cor? u~A##<k*jfj i 

[0 0 0 8 ] ms^m^^^<Dm^cm< %$>®e 

"The GSM S 

ystera for ftbbile Cornnurri cations" (M^Mouly & M-B.Pa 
utetv Cell & Sys, 1992 pp 477-492) ^#I©Ci 0 
[000 9 ] :z~*1f ~J8*#s- . : S^M®, 

(visitor location register : V L R) \.fcS0tl>* f& 

v l BAt, m^mi^M^^momm<ofcmc^ 

A - ^7 F^-^^HLR^lit^, DAMP 
S , P H S , fei^P D C*? b M$X VfcftL 

^ y % ©.if - x tifsj* - h it ar fc# J . c ft 

^^H2-S?OiS«»30SpI«T?*4« Mill AMPS* 

# (Cellular Digital Packet Data : G DPD) F 

- # / * h *.*^^<DW«'BOIHK:ill« , r 4 C & 

"€v£ v "Cellular Digital Packet r^ta'' (M.Streetftara 
n and RKurnar ,Artecb House Publishers, 1996 ( ISBH- 
0-89006-709-0) ) * #M<£> Ci e L* t> & 3&* 6 * DA 
MP S^GS MOi ^ & , Mtl'<D 7 s A is.&JVP. LMN s, ■ 



I 0 3 13 4 



6 



[00 11] 

PSTN s<>PLMN s ©± 5 &«e*©HLh* ^ h?-" 

XfA«aiit*fc 6 I R I D I UM (ffiA) 

BWfl 0 3 8 5 S 8 5 #£$8*5 <fc V* 
»^»5 . 3 9 4, 58-1 (Motorola) (CR- 

mStiTC^'d*. C til:!:, l*^SIS;&ii^B (lav ea 
rth orbit : L E O) ( constellation) 

di^OflJI, 7 8 0 km<D#ii^ 

[001 2 ] r if^t3^^^^ii^iHi (medium earth orbi 
t : M E O ) WM.<D&{%S&%Mf8T £ffi(DI > 1 
0, 00 0-20, 0 0 0 k m©ip©lMSt» 
Jlirt^ 8 CftCCOtrvrtt, Walker 3.G,"Sctte11ite 
Patterns for Conti n^ous .MU'lti pi e ^fhol e Earth Gover 
aqe" (Royal Aircraft Establishment, pp 11S-122 (19 

77) ) c <t e § 6fiG, m«; 

S^2 e 2 9 5, 2 9 ■6#>&«l^BiW3tir:lv-S I GO 

mm) mmte frv — ^ ; . cjww«wfflii& 
sse y mmr ms&i.v - a*#jh© . 

^ — F ( satel 1 i te access node : S A N ) ^liJ 

^ftSilv^jpj^ftS. ls-6(c, LEG : *? K»7-^ 
ft^« 

t o o i-3 i«aa«*:^. h 7 - ^$c*5^r 
-rs. »aai«*-> v ^-^u,- E^-;i/ s .7 T ^ 

>"^j5/(Z)^fM^<^ y r ^ ^ h ^- ^ (satellite 

packet: data network : S P D N ) tr^|§^*^#T^S 
iC^'SSKisarSftri^o I C O {^M) ^> 

X ^ A« , X *y y b $ ^ y b V - If 



7 

[0014] ##©^-Sii«*C^ M^m±P LMN 
-iftfcfc** :*~1f~$C** F >7~- .^*afiW3.H*:4 

* « : P L M N «c t o T ft & If - faf X & a -If 

«< F y—'ZU^ MfjV^f ^ ^^Jh^^ y br- 

f-^®* 7 ^>" ^t>SM^ i : tt^ ^ b V — 

[001 5 ] ^jB9K^-. iWiUiv- S^*.* 

F r ) — % %:M 1/ Tfr ^Ct ^ ft 0 , ^of 

h f*— $MM$f\ flS**>i? #©<£ 0 feffe 

1 ofiU-©* - #r ©ttff ©fc»©; :x-if-*B 

[0018] 

if ~S^t>Q»«<d^ x y 7* : 30 

^ftte^rj-^ 

tifc l -o<D * ^ h7-^ > # — «: T#-fe 

i-^^Hf ^^^^^ # £ «rfflt»r. «K3ftfc* 
tr F ■ ^«C»^S^^tf ^*5R©BE*tT ^ C £ £ 

[ 0 0 1 7 ] 0 1 £D * F y — £ W«I#© J: ? & 
: -F^©«#©&»*1f #~ F U W2<D% v 
b ■■f s 4&$jVf*Zry b #fi#€> 5 

£h & « 

[0 0 18] 3- : 6K:*IMBtt, ®»il#^Xf-A^>ffi 



Wf l O - 3 1 3 4 8 8 

' s 

<WI«(Dfc«f>tc : *attS«cc^--tr^ x y r b r 

-•5BSR:^3ti&liWlar- p6c»jftr*BE5f-r * 
^dtriBE^ > * £ , F Cc*tl£"*" 4BKf- 

©fc2fecc^-if-»^©BE*lf 9 ^Si 

S B 

[0019 ] ^ 6 &c;&IP$ U, m i ^^ A & ^ j b V - 
^■r ©j. - If ^^affi^BE^Si&ft b.r C * : 
S„ .e©j&8&t*«:, '^-if-iB5K6*, 01 f^»-^ 

(c^abH^ 3 *i fc-BE^Si * * fli t * S ttBE^K ft 
B, a - if -*5RrtfcfiH*snfc«^ ««W a - F t \ 

* 2 ■* v f y - ^ ©t atifi»cM# 's ttft&itt.&pm 

n-:FA**Jffl^*»-lttB^« 
IIEBItliBcWS ftteWMa - F Cc^iK^SBEf 5 

F ^ x^.-S C £ ; W 2 ^ ^ F>7t-.^ ^ 6 

t, *l- ^ F ^ - ^ S a-if -»5R©BE*tf 

[ 0 0 2 0 3 ^1^^ by — 9U%MMWWMM%* y b 

[0 0 2 1 3 fr^^? y b $ * 

[0 02 2 ] -<fc ^M*^cfc ■ 

a-1f-i»**BlET******> *«B, ^-if 

tcttfg pJIBt?* , -f F ^ - ^ 

« , -S^ ? > * ;kd te» 5c^»H5E 3 ft'fcBEf* ft 

tt^Kftt$ ; mmmi^cmm$ntcM*(D» 

m^~F£, W^F*>*)i>%:^l?&* y bV~t?<0 

,j h rj~ #<pflWBE^ F^» 
.l^4BE^****^Sfc»CC, '-^-/^ jr;l/^ y 
br'—% & v b *'J — & &h . ^ * > ^ 4- ^r#t^t' * 

> F ■^■^.^*.6<(^.3tlfcBEf ? .r- kfeffit&^tfrh- 



C6) 



9 

■&» ■ 

[0 0 2 3] -f 4 t> $ )W<sr v b v V r? - 



4 , IHE-t* £ St* * - £ >U7^ ^ ? F 7*~" * . * y h ■? — 

4 4 , BWM;^- *tc j£ G r > * fcBBEf*- * 
*3i*ttM" C 4 4; ■Bif-:*^»l£t5f'- i't3R* 

^■fc*5KCCBfey3&iW-iC4 4, «5R^ ^ 5rJtr^ ■ 

[0 02 5 1 

*«< SiiillifVXfA<b 4 *&9J$c'J:4 

5 AN l iSioii^ ^ h 7-^*5<fciy**i«:BiitLfc:- 
* 0 ■ .. tBSIHQf^ffl .^^^ fcafc© & <0 ^ & <5 . ■: B 3 fri * 

*e**. B8tt v B4 / H5 T'^fc S I M.^-« F 



2f 



SPDNO: 



8 5*; .SP=D-N"<Ofc»<DBIE#JBi*.©^ 

m2<Dmmmm<ommm^^ mi 

FS 



[0026 

AN I ^m^/««maSjM3 ;a^lfil)ti 

^w^^if^tin^j: ^^c;. s a n i ki* mmm 

[ 0 0 2 7] ^i©Il7^tX^- F S AN S 1 , 



10 



20 



40 



50 



WHffI 0-3 13 4 8 8 

10 

F GW i , 2 , 3 *a-LT ; 'fie*©«Lfc : -- 

stn) 6ij^snt^!);:ttP'STN : eii 

mtS»7 A^©«|**nJttfcr * P y- F Y GW.l 

.S.fetC^We?-*'*^ h"7-^ (PSDN) 8 
i^0P^M^*>f^*^ h'V-^ (PLMN) 9 
4fc^3hTl>S. #^oy-h?>*-fGWl, 2, 

^fW^A^S&^-fil/Wfe^*- (MSG) r« 

l^<D*_h$Caii^%S< ^/t-f Jb*:sr h ~ ^ p 

LMN:9 tHltSC ifer*:. ft'RLMN 9tt 

1f-^U T 1 4<DR^Sfi^€> U > ^ 1 1 

<S« C<D«rB, PLMN9B. GSM* ^ h^-^r 

( European Tel eco^ini cati oris Standard 
Insti tute : ETS I ) $c J: D Htf 3 tlXl > S , & 
G SMif (G^S Reco^esidations) ^#M#>C 4 8 - ^ 

^ System for .'Mobil eGcffR^usii cations" (UMyuly & M~ 
B.Pautet) €r#M£>C4 e 

[0 0 2 9 ] mm& v bV~ZU, iSWW^If-b^x 

«o*^£Dif-^xx :y .rt^-r *Jfc sizm 

# ; ; zp&faMxfi&'ix < 4 fe 8 0 xoNfBcc rn^t 

[003 0 ®si*me q^fwaffi^fc; 

a 1 0, 3 5 $ ^m<owm4$ki:^^H^K Mtmi 

it, W^<DMiM^^cMM £tl& $><D "C^^C t K CCD* 
JBgJBl-CB. ii3a, 3 b ^-illcDaitrt^Sti, 

Wk:lHW*«t>riB«'3ftrc>'*o mbtcMxtn: S A 
N 1 *BJtW«CRBU. SAN 2^rT^ y^^SSl,; S 
A N 3;**:H^i9* b\ *Qffe<D S: A N %<®b^^S 



ay 



■■: 11 ... - 

#f¥M^lgm 2 , 2 9 5 , 2 9 '6;5H^*«WDC j 

[0 0 3 1 1 «3 a , 3 b ^< ##±mai^R:^ - 
Urb^-X (Hughes) H S 8 0 1 <D& ^ U$&$t<BM 
■ti«3htWv *^M#i^«^lsm2 > 2 8 
8 . 9 1 3 ; *a««:H^'3 tifc#®*^Are & <£ U, * 

^tir^o #^£>b— ^@^i*iHMSI§®2 J 

29 3,; 7 2 5W&mcMm$fiTl>&£*>te, &Wl<D 

y 



WS*- v b ?~ $<D^)U€Mm Is "CU s* M 
MM s WfiftllSP > # ( satel 1 i te cont roT. cent 
3 SO 12 £ v ilK®^W*fei:^®J» (trac 
telanetry and control station : TT&C) 13 
£*c±T?Tffl«!S*i v ItS SC 12l5i:[>TT&C i:3 



re 
king 



1 4'i.SB«Stirc»ii SSC 1 2Mt>'TT& 
^; : NMC. l 4 5 m 

mommt. TT&cr3w^ti3n, ssc i 2 

[0D3 2]fiIg<D!|: S» 21^ # 

jl^^MO^^a ^§t5h/c«S±^T DMA 
£ ^ ax a : ? h *^& 0 $IM U > II^MfitScJBU 

2, 4 - 8 4 k bp sOllQf-'^V-FT; liM'T" 

* ^ # b "r- $mm& m^&'cth *imx$> 



^ >r y b ^ v b Y ) ~* % (satel 11 te di qi tal 
viork 



packet met 



10 



20 



30 



... S P D N ) h t,~cu<£ 0 
[0 0 3 3] H2-*#JtR*^<!:,. SAN llJ^r/l 

i«SftTU*«^JiI5 L E S 1 »>S^otte!) , 8L E S 

J: £W»-^S§ (codecs) ^Wt"^^^«liHSS^#A;tf 50 



W¥10~3r3 48 8 

: 12 . . 

f»M»>^-MSSC ltt; LES li 

US. MSSClit Mf§9^ 'X : S&tsJ:Zfrtlr v b ¥ 
: -5f) >*^ h"7-*5 : i'LES 1 ^^C 

&C <b«»CfS 0 MS. S C 1 T>TfA^hK 

cd a audi t » it & , 

[0 0 34] V L R 5 a t 1 ^MCDMA^tOMm. T 

ttfo%ft-!ia{tofc»^.s an 1 *3W^L ; t:t»4;ft>f <o 

a-f-gfUTO I MS I .. 
[ 0 0 3 5] £ S P DNIi^^ ? h f'-^fl 

#©»tl' S fcS6^ ; # S A N tC H20S A 

I S^8S^ 6tiTt^ e IKM^ ^ bV~iy?$<DT : 
jUJ^-y y b^—%82^W$fyt£^tiU, v b 7— 
# (ac^irsistrator) N A S S&C j: 5 MB3tVC& 0 , 
iNASSIt HI :tc^;S'tiid:5K:,.: NMC 1 4^cS 

[0 03 8] MS SO l» v h-5*-f GWl'KflN* 
^tlT^^IK ^ 1 tC^StifcP S DNS^WSTN 

US, CUT, iS^^^Ff^WPSDNB^ 

l#^S/td&^. ^rcD S A N#5\ -eil.^tl©V L R 5AT 
[0 0 3 7 3 ^ 3 %#M*S ^ , ^ > 7-^^, 

Ai&mi-isXZ (H L Rsat ) ^ b'C C€W"CfS3 

^fKl (local) " -tr- Frtef^L/ri,-v^cD^\ ^ 
*J (qlohal) " ^r- b'XW}i^bXl^&<Dfr&^5 €& 

t, m\JT<Dmmmt£{i[m&, m^tm^ corner ~ 
mj TMmmz nx t > & * - am s s g £ , 

feu T^MMS^M® I > S^a^ffi^O S ; A N h 
C^A,^Ct^ M H L R s a t 17^ Wil fcm%tiX\<*& 

2 5 3tj:^(Dmx^^nx^Xh^\ 
l0 0 3 8lil^#i«^, UT1^(D2 

bV-^j(D—M4:mVXO^mm^^ C ti 



CS) 

13 ■ . .. ■■ .. 

[0 0 3 91 % GSM* v YV-t? (PLMN9) 

^©^k**»«rfli<' »5B««»'B IS r t 

2 , 3 & ;4-*^r*; SET S *ttg#<fc <■ Je&fcftT 

»«!;: ^^CM^tiri^, it*B:L G SM* v\ F 

"7— :- : B** <fc'cif #f1iJik: JKSc s if — fcfx x 'irfti 
9 , ^ti&£tfffi^ ? F »7 ~ ©Etl & If ~ fcT X 

SStfit^#fe> b s c i Asg^s.tirr*5'o.L 3 6$e 
sc i iiisftriv^c b s c i y:, * 
c i b, ats**'*-/^* ? f r J—$<DB.wPrc, $ h 

K, GSM* Ftf-^tat/rUT 1 i^DiOr* 

FtT^^t-v 

[0 04 0 3 ffe±^»a^*S< GSM* y F?~#9 

(D I MS I ; ©te»4;VSE-I MS I -to'RI*tfc^*©# 

MN9 5t # -ftjR \y vX # V L R 9 , : ; 

^ V L R « • f&€> GSM* :/ h^-^^^ftbtt 
T , * ? • F 7 — P t€M$t 3 tifcSO A^CDIB^* 

M#lT& 0 WLK, P LMN 9 ^^S^!» 3 ^>t®^v 
09* tf F -f ^ £ <!r<DftBG>G S M* y. F 7 - 6</.)tt 
A#»* 3S$Cf§tt*, —SKftftffli (basis) ±^CM 

: [o 04 1 ] use^ >^-AucraiR * mm 3 nx aq 

: [0 042] * 



W1 0-3 1 348 8 

-.r., ^2 tern 3 tin > #l&i§si»u 

"tell v b P Q &m^tc^m<Dfc&<DM^<D 

g s mpk^, mm* '-v.- bK?~&mm>tc^mmc&jo> 



2, 



F2 3 , 7>rt2 4, feJ: 



flteSffiUK jc»c o r mm 3 tiff -r a x ^ u ^25 r # 

Rfll 2 7 ft tcft W A4T- v Y ^ a > 2 Q i x 
fcT— *2 I B, f£!t^fg2 9CcitJS3*l, ^l^ffi^S2 

[0 04 3] mBkC^H^J:^^, S I Mfj- F2 8 
B, ^ ^ V ! i-Ml B, S ! M&C 



XA A 3 /A 8 ^5 J: a ; A 5 1 1 



[0 044] ^ 



1^01 MS.lt 



®#^S04:^&^S^J:oT@»J^; ^fcB# 
- ^ B, ^ v F 2 3 ±0* - r 
[ 0 0 4 5 ] «M* ^ F 7-^^^-r^fc^C^-/s 

5.<ttt(^-r*« ■ w^iifi ^i'>v*n b/ .» ■ 
m* ^ f «? - ^ m&mmrr %> c ^ *«pjrt & . § -s 

S<DAMP S* ^ F V - *X cn&V&M^htiX^h 
C D P D :/a F r^Hc$« S P D UTil^TS C 

[ 0 04 8] PLMN9 <GSM*7F^— ^) fim$K 



m 

* +. ■> * ;i**c a -L/ ifcjHaaR^cttff-r s ■ ± -5 cc ^ fcnw > 
[oo 47] *: h^-^mm^m 

eftrPDN^- Frt?^^ $>&m:^ 

fcteiiiXlt* .PLMN&'tDffi&t.LXttM.*.? b *y-~ t? 

«r'fflt*tr; *ti^ : cfcb*8Lfctc«tili»M 

K r 7 — 9 6 * K - # b T ilfi 

7 - # iSCir, ■ E y - Jl/*5<£ tf* <Dtt<D^"^r 

h^-^-fcr**, G S M#> v h 9 ihF ~ 

h*i'& Ch % LXl<>Z> 9 
[0 0 48] # iifit 

©iE^4^r4fc»tCfftoft*dMI^*-B. GSM 

^ K^-^ (PLMN9) Wbtlt «©GSM 30 

.G©fH.7'*«fcOHl iirtiitj-j^iJcwr 

So 

c£^SC$Bl>6ft^ H:8. m 

9\ *3J:CWBl-0-*#JHb; II l iM^ittSit 40 
*.-r»»IKG S : M»»iBiE**(ii*iG:-3C >r J »7 

[ 0 0 5 0 ] i , G 3 v h CP LMN 9 ) 

bft- F ?:t/^^ RS I M#- Ffc*> Pi — CO I M 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

LThis document has been translated by computer. So the translation may not reflect 
the original precisely. 

2.3g»M»$e shows the word which can not be translated. 
3Jn the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1]It is the method of attesting a move user terminal for use using the 1st or 
2nd mobile network that supplies a service area to a common area, Each identification 
code by which said user terminal was held in this user terminal, In order to search 
authentication data corresponding to said identification code which could operate 
according to performs authentication using a corresponding identification code held in 
a remote authentication center set up beforehand, and was stored in said user 
terminal, Said authentication center is accessed through one as which it was chosen 
of said networks, An authentication method of a move user terminal including 
attesting said user terminal using said searched authentication data and data from 
said user terminal for said selected network from said authentication center. 
[Claim 2]A method according to claim 1, wherein said 1st network supports 
transmission of a signal in the 1st mode and said 2nd network supports transmission 
of a signal in the 2nd mode. 

[Claim 3]A method according to claim 2, wherein a signal in said 1st mode includes a 
voice channel signal and a signal in said 2nd mode includes a digital packet data signal. 
[Claim 4]A method according to any one of claims 1 to 3, wherein said 1st network is 
a satellite long distance communication network and the 2nd network is PLMN. 
[Claim 5] It is the method of attesting a move user terminal for use using the 1st 
mobile network, Said user terminal can operate using said 1st network and the 2nd 
network that supplies a service area to a common area, And use performs 
authentication beforehand set up for this user terminal, and said performs 
authentication, Each identification code held in said user terminal and a corresponding 
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identification code held in a memory site of said 2nd network are used, In order to 
search authentication data corresponding to said identification code held in said 
memory site in said 2nd network, Said 2nd network is accessed from said 1st network, 
An authentication method of a move user terminal including attesting said user 
terminal in said 1st network using said authentication data searched from said 2nd 
network, and data from said moving terminal. 

[Claim 6]A method according to claim 5, wherein said 1st network is a satellite long 
distance communication network and said 2nd network is PLMN. 

[Claim 7] It is the method of attesting a move user terminal for use using digital packet 
data networks, Said user terminal can operate to the voice channel communication in 
a mobile network using performs authentication to which it was beforehand set for a 
voice channel, and said performs authentication. Each identification code held in said 
move user terminal and a corresponding identification code held in a memory site in a 
network which supplies said voice channel are used, In order to search authentication 
data corresponding to said identification code stored in said memory site in said 
mobile network which supplies said voice channel, From said digital packet data 
networks, said mobile network which supplies said voice channel is accessed, An 
authentication method of a move user terminal including attesting said user terminal in 
said digital packet data networks using said searched authentication data and data 
from said moving terminal from said mobile network. 

[Claim 8]A method according to claim 7, wherein said digital packet data networks use 
a satellite communication link to said move user terminal and said voice channel is 
supplied by public mobile network which puts a base station on the ground. 
[Claim 9]A method comprising according to claim 7 or 8: 

Identification data corresponding to said identification code stored in said user 
terminal is transmitted to said digital packet data networks from said terminal. 
Said authentication data is transmitted to an authentication center in said voice 
network from said digital packet data networks. 

According to said identification data, said authentication data is pulled out from said 
authentication center. 

In order that said terminal may determine whether to be usable or not on said digital 
packet data networks, data pulled out from said terminal according to said appeal is 
compared [ calling to said moving terminal about data corresponding to authentication 
data, and ] with said authentication data. 

[Claim 10] A method comprising according to claim 9: 
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Said authentication data is transmitted to collation positions in said digital packet data 
networks. 

In said collation positions, said data pulled out from said terminal according to said 
appeal is compared with said authentication data. 

[Claim 1 1]A method according to claim 9 or 10, wherein said moving terminal stores an 
identification code and each discriminant function of said each and said authentication 
center also contains said identification code and said each discriminant function 
further. 

[Claim 12] According to performs authentication using each identification code held in 
a user terminal set up beforehand, for communication with a move user terminal which 
can operate, At least a part of 1 st and 2nd mobile networks that supply a service area 
to a common area. In order to search an authentication center containing 
authentication data corresponding to said identification code stored in said user 
terminal, and said authentication data corresponding to said identification code, A 
transmitting means which transmits data from said user terminal corresponding to 
said identification code to said authentication center from said the 2nd either said 1st 
network or network, A long distance communications system including an 
authentication means which attests said user terminal using said searched 
authentication data and data from said user terminal for said selected network from 
said authentication center. 

[Translation done.] 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 

[0001] 

[Field of the Invention]This invention about attestation (authenticating) of the move 
(mobile) user terminal for one or more long distance communication networks, And it 
has the application to the satellite long distance communication network for supplying 
a long distance communication service area (coverage) to a move user terminal like a 
mobile phone handset (handsets) which is not characteristic, however restrictive. 
[0002] 
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[Description of the Prior Art] The terrestrial move long distance communications 
system is known well, and various systems which operate by many various standards 
have developed. These public ground mobile networks (public land mobile 
networks:PLMNs) can operate by the analog or a digital standard. In the Far East 
except Europe and Japan, and other countries. To the digital global system mobile 
(Global System MobilerGSM) network gaining popularity, in the U.S. The advanced type 
cellular system (Advanced Mobile Phone System:AMPS) and the digital type U.S. 
cellular system (Digital American Mobile Phone System:DAMPS) are used, 
Furthermore, the personal handy phone system (Personal Handiphone SystemrPHS) 
and the digital cellular communication system (Personal DigitalCellularPDC) network 
are used in Japan. These days, the general move long distance communications 
system (Universal Mobile Telecommunications System:UMTS) is proposed more. All of 
these networks are cellular phone methods, and they place a base station on the 
ground (land-based). 

[0003] For example, considering a GSM system, each cell (cell) of the mobile network 
is supplied by the ground base transmitter-receiver office (base transceiver 
stations:BTSs) estranged geographically [ of a series ]. 

This BTSs is connected with the mobile change center (mobile switching centre:MSC) 
through the base station change center (base switching centres:BSCs), This MSG can 
supply a gateway from a network to the conventional public change telephone network 
(public switched telephone network:PSTN). 

Said network contains the home location register (home location registerHLR) which 
stores the information about the member and its user terminal to a system. When 
switch one of the user terminal is carried out, this user terminal is registered into HLR, 
and procedure of attestation is performed. The smart card known as Subscriber 
Identity Module (subscriber identification module:SIM) is supplied to each move user 
terminal, and this smart card stores two original discernment items, in order to identify 
a member. The 1st item comprises an international mobile subscriber identifier 
(international mobile subscriber identity:IMSI), and the 2nd item comprises a secret 
parameter mentioned as Ki in the specification of GSM. The authentication center 
(authentication centre:AuC) is connected with HLR. 

The data corresponding to IMSI and Ki for each network member is included. 
When switch one of the user terminal is carried out, and when it is others, IMSI is 
transmitted to HLR from a user terminal, and in order to attest a user, thereby, it 
refers for HLR to AuC. IMSI is compared in the memory of AuC and the value of 
corresponding Ki is searched. The random number RAND is generated within AuC. The 



4 



Publication JP 10-313488 



value of these random numbers RAND and Ki is applied as input data to the algorithm 
mentioned as A3 in a GSM specification, in order for a result with numerals (signed 
result) to generate SRES. AuC is further mentioned as A8 in a GSM specification, and 
this secret key Kc is used also including the algorithm which generates the secret key 
(secret key) Kc for the data encryption/decryption by which air transmission was 
carried out between the user terminal and the network which puts a base station on 
the ground. Actually, said algorithm A3 / A8 may be constituted by the single 
algorithm which makes 96 bit outputs from which 32 bits constitutes SRES and 
remaining 64 bits constitutes Kc generate. The signal of 3 groups which comprise 
RAND, SRES, and Kc is supplied to MSG through AuC to HLR, and this MSG acts as a 
collation office in performs authentication. 

[0004] And the value of each RAND is transmitted to a user terminal through a 
network from MSG. SIM of a user terminal has algorithm A3 / A8 stored locally so that 
the value of corresponding SRES* and Kc may be generated in a user terminal from 
the value of the received random number RAND, and the value of Ki stored in SIM. 
[0005] The value of SRES' is replied to MSG through a network and compared with the 
value of SRES generated at the beginning. When these are the same, a user terminal is 
attested, but the registration to HLR of a user terminal is prevented. 
[0006]Then, if a user terminal is attested, MSG will start the data 
encryption/decryption transmitted through the network using the algorithm of the 
encryption/decryption mentioned as A5 in a GSM specification. The secret key Kc 
and the frame number of the data transmitted through the network are used for this 
A5 as the input. SIM of a user terminal generates the value of the secret key Kc of 
itself using the copy of the algorithm A8 stored locally. Thereby, the value of local Kc 
in a user terminal can be used in order to encipher / decipher the transmitted data 
using the copy of algorithm A5 held locally. 

[0007]The advantage that only a random number is transmitted is among the performs 
authentication used by GSM with the air interface between a user terminal and BTS, 
and this makes danger of unjust registration the minimum. 
[0008]About the further details of performs authentication, and the data 
encryption/decryption which continues after that. Refer to "The GSM System for 
Mobile Communications" (M. Mouly & M-B.Pautet, Cell & Sys.1992 pp 477-492). 
[0009]When a user terminal moves to the GSM network with which geographically 
different places differ, a user terminal, Registering with the visitor position resistor 
(visitor location register:VLR) of the network of a visiting place, this VLR 
communicates with HLR which is a home network for bill creation dispatch and the 
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other purposes. DAMPS, PHS, and a PDC network also contain the similar position 
resistor. 

[00 10] Although the conventional analog PLMNs has supported service of digital 
packet data, transmission and reception of the message of a move user terminal, a 
facsimile, or E-mail are possible using this. For example, the AMPS network can 
support a cellular digital packet data (Cellular Digital Packet Data:CDPD) protocol. It 
becomes possible to transmit a data packet between the breaks of voice transmission 
with this protocol. About more detailed explanation of a CDPD system. Refer to 
"Cellular Digital Packet Data" (M. Streetharan and R.Kumar, Artech House Publishers, 
1996 (ISBN-0-89006-709-0)). However, DAMPS and present digital PLMNs like GSM 
have covered the disadvantage of not supporting such digital packet data services. 
[0011] 

[Problem(s) to be Solved by the Invention]The move long distance communications 
system using a satellite communication link has been proposed between a move user 
terminal and a conventional ground network like PSTNs or PLMNs. Although one 
network known as IRIDIUM (trademark) satellite cellular system is indicated by the 
European patent laying-open-of-application No. 0365885 gazette and the U.S. Pat. No. 
5,394,561 specification (Motorola), This uses the so-called conformation 
(constellation) of a low orbital circumference (low earth orbit:LEO) satellite, and these 
satellites have an orbital radius of 780 km. The link to the satellite on which an orbit is 
drawn high up in the air is established, and a telephone call is transmitted to other 
satellites in said conformation from this satellite, and a move user terminal like the 
handset of a telephone may usually be transmitted to the ground station connected 
with the network which establishes a base station in the conventional ground. 
[0012]Other plans to use the so-called conformation of a middle earth orbit 
circumference (medium earth orbitrMEO) satellite are proposed with the orbital radius 
of the range of 10,000-20,000 km. About this. Walker J.G."Satellite. Refer to Patterns 
for Continuous Multiple Whole Earth Coverage" (Royal Aircraft Establishment, pp 
1 19-122 (1977)). For example, refer to the ICO (trademark) satellite cellular system 
currently explained in the British patent application public presentation No. 2,295,296 
gazette, and the ODYSSEY (trademark) satellite cellular system currently explained in 
the European patent laying-open-of-application No. 0,510,789 gazette. In these 
systems, a satellite communication link does not permit communication between 
adjoining satellites, but instead, the signal from a move user terminal like a move 
handset, It is first transmitted to a satellite, and is transmitted to a ground station or a 
satellite access node (satellite access node:SAN), and is connected to the telephone 
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network which establishes a base station in the conventional ground. There is an 
advantage that there are known digital ground cellular art and compatibility many 
whose components of a system are in this. [ like GSM ] It is also possible to use 
satellite communication art simpler than the case of a LEO network. 
[001 3] In the satellite communication network, the ground station is installed in various 
places in the world, in order to communicate with the satellite which draws and turns 
around an orbit, in an ICO (trademark) system and others, the visitor position resistor 
is connected with each satellite ground stations, and the satellite ground stations of 
each this hold record of each user terminal using a specific ground station. In order 
that a satellite communication network may enable E-mail, fax, and transmission of 
other data, the proposal that a digital satellite packet data network (satellite packet 
data networkSPDN) should be supplied is made. For example, the ICO (trademark) 
system is designed support such a packet data network. 

[0014]The service areas supplied by conventional ground PLMN and satellite network 
in the area with the world will overlap in a common area. The proposal that each 
moving terminal operates on the both sides of PLMN and a satellite network is made. 
A user terminal may also include the switch which makes it possible to make a user 
choose a network, or auto select may be made again based on the intensity of a signal, 
for example. It is usually expected that the conventional ground network is liked for 
the reason of expense or signal strength. However, for a certain PLMN, if a certain 
service is supplied through a satellite network for a user terminal and other services 
can be supplied through PLMN, it is convenient. For example, the network which 
establishes a base station in the digital grounds, such as GSM, Since digital packet 
data services are not supported in present, in order to use the network of the digital 
packet data supplied by the satellite network to data transmission, it is convenient if a 
satellite network is used as extension of PLMN. 

[0015]This invention enables voice channel communication to carry out through one 
long distance communication network like digital PLMN for example, And digital packet 
data communication relates to the attestation of a user terminal for operation with 
one or more networks so that it may become possible to carry out through other 
networks like a satellite network. 
[0016] 

[Means for Solving the Problem]Generally, this invention provides an authentication 
method of a move user terminal for using it in the 1st or 2nd mobile network that 
supplies a service area to a common area for communication by a user terminal. In 
this method, the user terminal could operate according to performs authentication set 
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up beforehand, and this performs authentication uses each identification code held in 
a user terminal, and a corresponding identification code held in a remote 
authentication center. In order to search authentication data corresponding to an 
identification code stored in a user terminal, this method, It consists of attesting a 
user terminal to a selected network using accessing an authentication center through 
one selected network, and authentication data and data from a user terminal which 
were searched from an authentication center. 

[001 7]The 2nd network is able for the 1st network to support transmission of a signal 
in the 1st mode like an audio signal, and to support transmission of a signal in the 2nd 
mode like a digital packet data signal. 

[001 8] Furthermore, a long distance communications system also provides this 
invention, and this long distance communications system, According to performs 
authentication using each identification code held in a user terminal set up beforehand, 
for communication by a move user terminal which can operate, The 1st and 2nd 
mobile networks that supply a service area to a common area, In order to search an 
authentication center containing authentication data corresponding to an 
identification code stored in a user terminal, and authentication data corresponding to 
an identification code, A means to transmit data from a user terminal corresponding to 
an identification code to said authentication center from either the 1 st network or the 
2nd network, A means which attests a user terminal for a network chosen from an 
authentication center using authentication data and data from a user terminal which 
were searched is included. 

[001 9]Furthermore, this invention also provides a method of attesting user-terminal 
communication in the 1st mobile network. In this method, performs authentication 
which could operate in the 2nd mobile network that supplies a service area which 
overlaps the 1st network, and was beforehand set up for a user terminal is used for a 
user terminal. This performs authentication uses each identification code held in a 
user terminal, and a corresponding identification code held in a memory site of the 2nd 
network. In order to search authentication data corresponding to an identification 
code held in said memory site of the 2nd network, said method, It consists of attesting 
a user terminal in the 1st network using accessing the 2nd network from the 1st 
network, and authentication data and data from a moving terminal which were 
searched from the 2nd network. 

[0020] The 1st network may comprise a satellite long distance communication network, 
and the 2nd network may comprise PLMN. 

[0021]This invention may use performs authentication for voice networks, in order to 
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attest communication which lets digital packet data networks pass. 
[0022]This invention a move user terminal more specifically including a method of 
attesting for use which used digital packet data networks there, The user terminal can 
operate to the voice channel communication which used a mobile network, and this 
mobile network, This procedure uses each identification code held in a moving 
terminal, and a corresponding identification code held in a memory site of a network 
which supplies a voice channel using performs authentication beforehand set up for a 
voice channel. In order to search authentication data corresponding to an 
identification code stored in said memory site of a mobile network which supplies a 
voice channel, said method, A mobile network which supplies a voice channel is 
accessed from digital packet data networks, It consists of attesting a user terminal in 
digital packet data networks using authentication data and data from a moving 
terminal which were searched from a mobile network. 

[0023] Digital packet data networks may use a satellite communication link to a move 
user terminal, and a voice channel may be further supplied by a public mobile network 
like a GSM network which puts a base station on the ground, for example. 
[0024]A method by this invention transmits identification data corresponding to an 
identification code held at a user terminal from a terminal to digital packet data 
networks, Authentication data is transmitted to an authentication center in a voice 
network from digital packet data networks, According to identification data, 
authentication data is pulled out from an authentication center, It may include asking 
for data corresponding to authentication data, and calling to a moving terminal, and 
comparing with authentication data data pulled out from a terminal according to 
appeal, in order that a terminal may determine whether to be usable or not on digital 
packet data networks. 
[0025] 

[Embodiment of the Invention]Since this invention is understood more nearly 
thoroughly, the example which referred to the accompanying drawing explains this 
embodiment below. Drawing 1 is a schematic diagram showing the satellite long 
distance communications system by this invention with the local move long distance 
communications system which places a base station on the ground. Drawing 2 is a 
more detailed block diagram of an about one SAN satellite network and the ground 
cellular system network relevant to it, and is for showing a mutual operation. Drawing 
3_is a rough block diagram showing the two-way communication in a satellite network. 
Drawing 4 is a schematic diagram of a move user terminal. Drawing 5 is a rough block 
diagram of the circuit of the terminal shown by drawing 4 . Drawing 6 is a rough block 
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diagram of the SIM card shown by drawing 4 and drawing 5 . Drawing 7 is a schematic 
diagram of the data flow relevant to attestation of GSM and PLMN9, Drawing 8 is a 
schematic diagram of a 1st embodiment of the performs authentication for SPDN. 
Drawing 8 is a schematic diagram of a 2nd embodiment of the performs authentication 
for SPDN. Drawing 10 is a schematic diagram of a 3rd embodiment of the performs 
authentication for SPDN. Drawing 1 1 shows roughly the data transmission between 
various components in the network for performs authentication. 
[0026]* Reference of satellite network drawing 1 shows generally the rough block 
diagram of the satellite move long distance communications system corresponding to 
ICO (trademark). Move user-terminal UT1 of the form of a mobile phone handset can 
communicate through the radio channel of the communication paths 1 and 2 which 
went via the earth-orbit satellite 3a using satellite access node SAN1 which puts a 
base station on the ground. The antenna 4 which can pursue an orbital satellite is 
supplied to SAN1 as roughly shown in drawing 1 . 

[0027]It is connected and both much satellite access node SANS1, and 2 and 3 form 
the backbone network 5, and this backbone network 5 lets much Gateway G W1, and 2 
and 3 pass, and is connected with the telephone network which establishes a base 
station in the conventional ground. For example, considering Gateway G W1, GW1 is 
connected with the public change telephone network (PSTN) 6 which places a base 
station on the ground, and this PSTN6 enables connection with the conventional 
telephone 7. Gateway G W1 is further connected to the public change data networks 
(PSDN) 8 and the public local mobile network (PLMN) 9. Each Gateway G W1, and 2 
and 3 may comprise a mobile change center (MSG) which can obtain commercially 
form in which it is used in the GSM network. 

[0028]As shown in drawing 1 . handset UT1 can also communicate by mobile network 
PLMN9 which establishes a base station in the conventional ground, and this PLMN9 
is roughly shown that it includes the transmitter-receiver office 10 which establishes 
the link 11 of the simultaneous-transmission-and-reception method of user-terminal 
UT1. In this example, PLMN9 is a GSM network. . Are published by the Europe long 
distance communication standard association (European Telecommunications 
Standard Institute:ETSI) for the more perfect understanding of GSM. Refer to various 
GSM advice (GSM Recommendations). Refer to above-mentioned "The GSM System 
for Mobile Communications" (M. Mouly & M™B.Pautet) as an outline which can be 
understood more easily. 

[0029]Although the satellite network is designed supply a global service area and the 
satellites 3a and 3b form a part of conformation of a satellite, this satellite may be 
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arranged at some orbits. In one example, what has arranged five satellites which may 
be shown that it supplies the service area of most surface of the earth into two orbits 
is used. To the ascending vertical angle of the satellite of 10 degrees, one satellite can 
access all the time by a move handset, and two satellites can access at least 80% of 
time, and, thereby, supply the diversity of a system there. In order to supply 
redundancy (redundancy) and diversity furthermore, the satellite of further a long 
distance may be included in conformation. 

[0030]Although a satellite is usually arranged, for example with the orbital radius of 
1 0,355 km in MEO conformation, this invention is not restricted to a specific orbital 
radius. According to this embodiment, the satellites 3a and 3b are shown in a common 
orbit, and these satellites are pursued by the antenna arrangement of each SAN. 
Usually, each SAN contains five antennas, in order to pursue each satellite in 
conformation. In order to supply a service area without a break, SAN keeps an interval 
in terrestrial everywhere and is arranged. In the shown example, SAN1 may be 
installed in Europe, SAN2 may be installed in Africa, SANS may be installed in the U.S., 
and other SAN may be installed in other areas. It is shown by drawing 1 t hat SAN2 is 
communicating with user-terminal UT2 via the satellite 3b. Refer to the British patent 
application public presentation No. 2,295,296 gazette for the further details of a 
satellite network. 

[0031 ]The satellites 3a and 3b may also include the feature which is in a 
non-geostationary orbit, and comprises a conventional satellite like fuse (Hughes) 
HS601 generally, and was indicated by the British patent application public 
presentation No. 2,288,913 gazette. Since the satellites 3a and 3b generate the 
arrangement of the beam which has covered the terrestrial electric wave receivable 
region of the satellite lower part, respectively, they are arranged, and each beam, The 
frequency channel and time slot from which a large number which are indicated by the 
British patent application public presentation No. 2,293,725 gazette differed are 
included. In this way, these beams supply adjoining cellular area and this cellular area 
supports the cell of the mobile phone network which establishes a base station in the 
conventional ground. Said satellite The satellite control center (satellite control 
centre:SSC) 12, It is controlled by pursuit telemetering and the control station 
(tracking telemetry and control station:TT&C) 13, This SSC12 and TT&C13 let the 
digital network 1 5 connected with the backbone network 5 pass, and are connected 
with the network management center 14. Although SSC12 and TT&C13 control 
operation of the satellites 3a and 3b, it is for, for example, setting up input tuning of a 
transmitting power level or a transponder, as transmitted in NMC14. It is received by 
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TT&C13, and the signal of telemetering for the satellites 3a and 3b is processed by 
SSC12, and ensures that these satellites function normally. 
[0032]Handset UT 1 and 2 communicates with the satellites 3a and 3b between 
telebriefs via the channel of the perfect simultaneous-transmission-and-reception 
method which comprises a downlink channel and an uplink channel. Said channel 
contains a TDMA time slot on the frequency assigned on the occasion of a call start. 
A satellite link can be used for voice communication and further. For example, to the 
facsimile between a user terminal and SAN, a text message. E-mail, or other packet 
data transmission, it is a data rate of the range of 2.4~64k bps, and it is also possible 
to use for satellite digital packet data communication. Thus, the satellite network is 
supporting the satellite digital packet network (satellite digital packet network:SPDN). 
[0033]Reference of drawing 2 shows the composition of SAN1 and local PLMN9 more 
to details. SAN1 consists of ground station LES1 connected with five sets of the dish 
type antennas 4 for satellite tracking, and this LES1 includes the amplifier, the 
multiplexer, the demultiplexer, and the transmitter-receiver circuit that has codec 
(codecs).Moving satellite change center MSSC1 is connected with LES1 and satellite 
visitor position resistor VLR SAT 1. MSSC1 makes signal transmission (a sound and 
packet data) connect with the backbone network 5 and LES1, and it lets the 
communication links 1 and 2 of the simultaneous-transmission-and-reception type 
which went via the backbone network 5 and the satellite 3a pass, It makes it possible 
to establish each telebrief to move user-terminal UT1. MSSC1 transmits a signal 
appropriately to those destinations according to the address on the signal 
transmission which enters from the antenna 4. 

[0034]VLR SAT 1 holds IMSI of each user-terminal UT which uses SAN1 for each 
member's record, i.e., signal communication. 

[0035]In order to control the flow of the packet data signal of the circumference of 
SPDN, mobile data relay station MD-IS is provided in each SAN so that SAN1 of 
drawing 2 may be shown. The overall flow of the digital packet data in a satellite 
network is controlled by network administrator (administrator) NASS, and this NASS 
may be installed with sufficient convenience in NMC14, as shown in drawing 1 . 
[0036] It is connected to Gateway G W1, and MSSC1 supplies output connection with 
PSDN8 and PSTN6 which were shown in drawing 1 also to PLMN9. In this way, packet 
data will usually be exchanged with PSDN8 and an audio signal will be exchanged with 
PLMN9 or PSTN6. In order to hold a registered subscribers record, it turns out that 
all the SAN has each VLR SAT and a similar structure. 

[003 7] If drawing 3 is referred to, the satellite network also contains the database 17 
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mentioned in this sentence as a satellite home location register (HLR SAT ) including the 
record relevant to each move user-terminal UT. Said record so that it may be 
explained in detail as the identifier of a terminal, i.e., the IMSI, by the present state of 
this UT, i.e., the following. It says [ whether it is being operated in the "overall (global)" 
mode whether it is operating in the "local (local)" mode ], Working SAN in which this 
UT is communicating with the geographical position of this UT and home MSSC into 
which this UT is registered so that bill record and other data can be collected at a 
single point via a satellite by this is included now. HLR SAT 1 7 may be installed in NMC14 
shown in drawing 1 , or may be distributed between SAN 1, 2, and 3 etc. 
[0038] Reference of drawing 1 may register UT1 into one of the following two separate 
states. So that the "local" state where it is permitted that two separate states 
communicate only by UTs letting a part of one local area or satellite network pass, 
and UT may provide the use in a large area, It is in the "overall" state where the 
qualification for communicating through all the portions of a satellite mobile network is 
given. 

[0039]* GSM network (PLMN9) 

If drawing 2 is referred to again, the GSM mobile network 9 is the method by which 
this BTS is well known in itself including transmitter-receiver office BTS1 which 
establishes a base station in much grounds, 2, 3, etc., and in order to support a cellular 
system network, it is estranged geographically. Usually, the GSM network has a 
service area which laps on a country and states, and, so, overlaps the wide range 
service area of the satellite network. It turns out that BTS1 is shown with the 
connected antenna 10 and it is connected to base station change center BSC1 by the 
terrestrial communication line, and further two or more BTS(s) are the methods 
known well in itself, and are connected with BSC1. BSC1 is connected with mobile 
change center MSC1, and this MSC1, Within the limits of a mobile network, it is still 
more possible in a telephone call the conventional PSTN or to pass along Gateway G 
W1 via the wiring 19, and to transmit to a satellite network further, via the wiring 18 
through Gateway G MSC1. Thus, a voice channel telephone call can be exchanged 
with UT1 through a GSM network. However, the GSM network is not supporting the 
digital transmitting and receiving packet data of user-terminal UT1. 
[0040] The home location register HLR for GSM network 9 which puts a base station 
on the ground is connected with GMSC1, and is supplied. HLR holds record of IMSI of 
the user terminal registered for the use which used the network, and the details of the 
member relevant to this IMSI for the purpose of bill creation dispatch in the 
conventional method. Furthermore PLMN9 also contains the visitor position resistor 
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VLR, and this VLR moves from other GSM networks, and holds a member's record 
temporarily registered into the network. For example, when PLMN9 is put on Britain, 
the member from the GSM network of foreign countries, such as Germany, may be 
locally registered on a temporary base (basis), for example, while staying in Britain. 
The usage information of a telephone is relayed from VLR to a network of Germany 
for the purpose of bill creation dispatch via PSTN6 by the conventional method. 
[0041 ]The authentication center AuC is connected with HLR. AuC contains the 
database and random number generator of Ki, and this database is uniquely connected 
with each member's IMSI with algorithm A3 / A8 according to GSM advice. This 
stored data is used in order to attest a user terminal like terminal UT1 so that it may 
explain to details more later. 

[0042]* Reference of move user-terminal drawing 4 and drawing 5 designs move 
user-terminal UT1 operate in both a local ground cellular phone network and a 
satellite network. Therefore, in the example shown in drawing 2 . it enables move 
handset UT1 to operate according to satellite either the GSM protocol which puts a 
base station on the ground or a network protocol. User-terminal UT1 comprises a 
move handset in which dual mode operation is possible as shown in drawing 4 . The 
conventional GSM circuit for the use using the cellular system network 9 which puts a 
base station on the ground is included in this with the circuitry portion to which it was 
[ for the use using a satellite network ] similar. Handsets are the microphone 20, the 
loudspeaker 21, the battery 22, the keypad 23, the antenna 24, and a satellite link 
course, In order to display the message transmitted to the terminal through digital 
packet data networks, it comprises the display 25 which may be used for other 
component parts being mixed. Device UT1 which it can have by hand also contains the 
Subscriber Identity Module (SIM) smart card 26. The circuitry of handset UT1 is 
shown to drawing 5 by the block figure type. SIM card 26 is received in the SIM card 
reader 27 connected with the control device 28 which is usually a microprocessor. 
The microphone 20 and the loudspeaker 21 are connected with the codec 29, this 
codec 29 is connected with the conventional wireless interface 30 connected to the 
antenna 24, and signal transmission is transmitted and received [ they are the method 
learned well thereby in itself, and ]. 

[0043]As shown in drawing 6 , SIM card 26 stores each IMSI including the memory M1 
with algorithm A3/A8, and A5 by the discriminant function Ki with this memory M1 
peculiar to SIM, and GSM advice. 

[0044]* As the network selection above-mentioned was carried out, networks are 
many various methods and may be automatically chosen with either of the manual 
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types by factor like signal strength. In this example, a network is chosen as a manual 
type using the key on the keypad 23. 

[0045]If the keypad 23 is operated in order to choose a satellite network, the control 
device 28 will operate so that the codec 29 and the wireless interface 30 may be 
constituted according to frequency, a protocol, and transmit frequency suitable for a 
satellite network. A voice transmission channel can be chosen as satellite networks. 
For example, digital packet data services can be chosen through SPDN according to 
the CDPD protocol used until now in a U.S. AMPS network. In this way, selection of a 
satellite network will perform both a voice channel and packet data communication via 
the satellite 3a through the simultaneous-transmission-and-reception method links 1 
and 2. 

[0046]If PLMN9 (GSM network) is chosen, the control device 28 will set up the 
wireless interface 30 operate through the simultaneous-transmission-and-reception 
method link 1 1 on frequency suitable for the GSM network voice channel which puts a 
base station on the ground. However, the GSM network cannot support digital packet 
data services by itself. 

[0047]* When network interaction re-****2 is referred to, a satellite network, It may 
comprise an ICO (trademark) system, and every time this ICO (trademark) system lets 
the cellular system network which establishes a base station in the conventional GSM 
network 9 or other grounds pass, it can supply the enhanced service which cannot be 
used. In this example, the GSM network 9 cannot support PDN by itself. So, in a 
certain environment, it is desirable to transmit a telephone call through a satellite 
network from the mobile network 9 which puts a base station on the ground by that 
cause, and to use additional available service through a satellite network, using a 
satellite network as extension of PLMN9. The interaction-functions device 31 is 
supplied for this purpose, perfect control of the service facilities between the 
networks which establish a base station in a satellite and the ground of a cellular 
communication system is enabled, and it is using a satellite network by this, It makes it 
possible to support the packet data services of E-mail and others with a GSM 
network. 

[0048]* As the performs authentication above-mentioned was carried out, when 
switch one of user-terminal UT1 is carried out, it is necessary to register with the 
network which should be used for the communication purpose, and performs 
authentication needs to be performed in order to determine the justification of a user 
terminal. Although the conventional GSM registration and performs authentication are 
performed to a GSM network (PLMN9), this is explained more to details with reference 
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*° drawing; 7 and drawing 1 1 after this. 

[0049]According to this invention, for the use using the satellite packet data network 
SPDN of this conventional GSM registration procedure, It is evaluated that it is 
possible for it to be also adapted so that attestation of a user terminal may be 
supplied, with reference to drawing 8 f drawing 9 , and drawing 1 0 , three examples about 
how performs authentication is used via SPDN are connected to drawing 1 1 t here, and 
it explains them. GSM registration and performs authentication are first explained with 
reference to drawing 7 . 
[0050] 1. GSM network (PLMN9) 

As mentioned above, user-terminal UT1 contains the SIM smart card, and this SIM 
card stores only IMSI, the only discriminant function Ki, and GSM encryption algorithm 
A5 according to GSM advice ( drawing 8 ). Registration and performs authentication are 
provided with the following. 

IMSI is transmitted to the GSM attestation center AuC. 

The data from SIM is compared with the data from the authentication center AuC in 
the collation office 35. 

In the conventional GSM performs authentication, the collation office 35 is arranged in 
the GSM network, and may be arranged MSC1. 

[0051] Drawing 7 shows the data flow between various components of a GSM network, 
and user-terminal UT1. The step of performs authentication is stated to drawing 1 1 . 
[0052]In the 1st step S1, it is transmitted to HLR from UT1 via BTS1, BSC1, and 
MSC1, and IMSI is transmitted to the authentication center AuC from there. As 
mentioned above, the authentication center AuG includes the copy of the discriminant 
function Ki relevant to each IMSI applicable to the use on a GSM network. 
[0053]IMSI is compared within the memory of AuC and the value of corresponding Ki 
is searched with Step S2. The random number RAND is generated within AuC using a 
random number generator (not shown). Within AuC, the value of the random numbers 
RAND and Ki is applied as an input to a GSM algorithm, in order for a result with 
numerals to generate SRES. This secret key Kc is used also including the GSM 
algorithm A8 with which AuC generates the secret key Kc for the 
encryption/decryption of data by which air transmission was carried out between the 
user terminal and the network which puts a base station on the ground. Actually, 
algorithm A3 / A8 may consist of single algorithms which make 96 bit outputs from 
which 32 bits constitutes SRES and remaining 64 bits constitutes Kc generate. 
[0054]In Step S3, the signal of 3 groups which consist of RAND, SRES, and Kc is 
supplied to MSG through HLR from the authentication center AuC, and this MSG 
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functions as the collation office 35 in performs authentication. Actually, although n 3 
group signals are supplied during a telephone call to MSG for the use in just next 
attestation, in order to explain briefly here, 3 groups will consider only one processing, 
for example. 

[0Q55]In step S4, the value of each RAND is transmitted to a user terminal through a 
network from MSG. The value of corresponding SRES' occurs in user-terminal UT1 
from the value of Ki which SIM of user-terminal UT1 stored algorithm A3 / A8, and 
was stored in the received random number values RAND and SIM in Step S5 by this. 
[0056]In Step S6, the value of SRES' is replied to MSG through a network and 
compared with the value of SRES generated at the beginning in Step S7. When these 
are the same, a user terminal is attested, but the registration to HLR of a user 
terminal is prevented. 

[0057]When attestation is successful, MSG begins and the data 
encryption/decryption transmitted through the network using the algorithm 
mentioned as A5 in the GSM specification this A5, As the input, the frame number of 
the secret key Kc and the data transmitted through the network is used. Encryption 
and decryption are actually performed in BSC or BTS. SIM of user-terminal UT1 
generates the value of the secret key Kc of itself using the copy of the algorithm A8 
stored locally. In this way, the local value of Kc in user-terminal UT1 may be used in 
order to encipher / decipher data using the copy of algorithm A5 held locally. 
[0058]Although only an essential random number is transmitted through an air 
interface, it turns out that these random numbers are mutually unrelated and danger 
of the use which is not reproduced and attested is made into the minimum. 
[0059]According to this invention, it has been evaluated that it is also possible to use 
in order that this general art may attest SPDN so that it may explain below. 
[0060] 2. Attestation 2.1 of satellite digital packet network With reference to the 1st 
embodiment drawing 8 and drawing 1 1 1 the data flow for attestation of SPDN is 
explained below. Performs authentication uses the value which was held in IMSI from 
SIM, and AuC of GSM network PLMN9 and in which Ki was stored. Although the step 
of procedure is the same as that of what was generally shown in drawing 11 , the 
collation office 35 comprises NASS in this case. 

[0061]That user-terminal UT1 should be attested in Step SI for the use which used 
SPDN IMSI, Although transmitted to PLMN9 via GW1 ( drawing 1 ) via NASS 
(connected with NMC14) via the satellite 3a and MD-IS1 (connected with SAN1), IMSI 
is further transmitted to HLR and AuC as roughly shown in drawing 8 . And at Step S2, 
IMSI is compared within the memory of AuC, and if just, the value of corresponding Ki 
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will be pulled out from a memory, as explained with reference to drawing 7 . The value 
of each RAND is generated, algorithm A3 / A8 operate to RAND and Ki, and SRES and 
Kc are made to generate. 

[0062]And in Step S3 f 3 groups of SRES, Kc, and RAND are transmitted from AuC to 
the collation office 35, i.e., NASS. 

[0063]In step S4, the value of each RAND passes along a network, is replied to 
user-terminal UT1 via satellite 3a ( and as the value of corresponding SRES' 
mentioned above with reference to drawing 7 at Step S5 there, it is generated. In Step 
S6, in order to compare with the value of SRES in 3 groups received from HLR of 
PLMN9 before, the value of generated SRES' is replied to NASS via the satellite 3a 
and MD-IS1. 

[0064]In Step S7, the value of SRES and SRES' is compared, and if they are the same, 
a user terminal will be attested for the use which used SPDN. 

[0065]In this way, the procedure explained with reference to drawing 7 and drawing 8 , 
Make it possible to attest a user terminal selectively because of either PLMN9 or 
SPDN, and by that cause a user terminal, It may be used for the packet data 
communication through the network SPDN which went via the object for voice 
communications and the satellite 3a on a GSM network, i.e., PLMN9. 
[0066]When performs authentication is passed to other cells from the communication 
cell which has a system during transmission and 3 groups of other individuals (n-1) 
may be used for this purpose, it turns out that it may be repeated. 
[0067]2.2 If the 2nd embodiment drawing 9 is referred to, the performs authentication 
shown in drawing 8 can be changed so that collation (Step S7) of SRES and SRES' 
may be performed by the interaction-functions device (interworking function unit) IWF 
shown in drawing 2 . Therefore, IWF functions as the collation office 35. Drawing 9 
shows the data flow for use by this embodiment Although the value of SRES and the 
value of corresponding SRES' are generated by the same method as that (Step S1 - 
S6) which was explained with reference to drawing 8 , comparison (Step S7) of a signal 
value is performed by IWF. 

[0068]2.3 Also in MSSC1 in suitable SAN ( drawing 2 ), the function of the 3rd 
embodiment collation office 35 may be performed. Reference of drawing 10 shows the 
data flow to which it corresponds for performs authentication. The value of SRES and 
the value of corresponding SRES' are generated the same with having mentioned 
above, and are sent to MSSC1 for comparison, and this attests them for the use using 
SPDN of user-terminal UT1. 

[0069]A terminal is attested by the authentication center (not shown) connected with 
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HLR SAT shown in drawing 1 , when communication of both a sound and packet data is 
thoroughly performed by the links 1 and 2 through a satellite network and PLMN9 is 
not chosen. 

[0070]Many other corrections enter within the limits of this invention. For example, it 
turns out that PLMN9 can operate on the standard from which a large number, such 
as DCS1800 in PHS in Japan, PDC, or the countries of a certain Europe or newly 
proposed UMTS, differ, and a protocol. 

[0071] Although this invention has been explained in relation to an ICO (trademark) 
satellite network, it can also use other satellite networks with various conformation 
and a signal transmission protocol. 

[007 , 2]Although the signal communication on the course 1 and 2 uses a TDMA access 
protocol, It is also possible to use other protocols like code division multiple access 
(code division multiple access) (CDMA) or Frequency Division Multiple Access 
(frequency division multiple access) (FDMA). 

[0073]Since [ of explanation ] user-terminal UT is expressed for convenience, have 
used the word of "movement (mobile)", but Or it can have this word in a hand, it 
should not be restricted to a portable terminal but, also including the terminal carried 
in a ship, an airplane, or vehicles on land for example, should be understood. It is also 
possible to fix a certain terminal UT selectively completely at least, and to carry out 
this invention. 
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DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1]It is a schematic diagram showing the satellite long distance 

communications system by this invention with the local move long distance 

communications system which places a base station on the ground. 

[Drawing 2] It is a more detailed block diagram of an about one SAN satellite network 

and the ground cellular system network relevant to it, and is for showing a mutual 

operation. 

[Drawing 3] It is a rough block diagram showing the two-way communication in a 
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satellite network. 

[Drawing 4] It is a schematic diagram of a move user terminal. 

[Drawing 5] It is a rough block diagram of the circuit of the terminal shown by drawing 
4. 

[Drawing 8] It is a rough block diagram of the SIM card shown by drawing 4 and drawing 
5. 

[Drawing 7] It is a schematic diagram of the data flow relevant to attestation of GSM 
and PLMN9. 

[Drawing 8] It is a schematic diagram of a 1st embodiment of the performs 
authentication for SPDN. 

[Drawing 8] It is a schematic diagram of a 2nd embodiment of the performs 
authentication for SPDN. 

[Drawing 10] It is a schematic diagram of a 3rd embodiment of the performs 
authentication for SPDN. 

[Drawing 1 1] The data transmission between various components in the network for 
performs authentication is shown roughly. 
[Description of Notations] 
UT1, UT2 user terminal 
GW1 , and 2 and 3 Gateway 

1 t 2, and 11 Simultaneous~transmission-~and~-reception method (ink 
3a and 3b Satellite 

4 Dish type antenna 

5 Backbone network 

6 PSTN 

7 Telephone 

8 PSDN 

9 PLMN 

1 0 Antenna 

12 SCO 

13 TC&G 

14 NMC 

15 Digital network 

1 7 Database 

18 and 19 Wiring 

20 Microphone 

21 Loudspeaker 
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22 Battery 

23 Keypad 

24 Antenna 

25 Display 

26 SIM smart card 

27 SIM card reader 

28 Control device 

29 Codec 

30 Wireless interface 

31 Interaction-functions device (IWF) 
35 Collation office 
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